PT-2002-1962 · Php · Php Address

Publicado 2002-10-04 · Atualizado 2008-09-05 · CVE-2002-0953

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP Address versions prior to 0.2f

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter when the PHP allow url fopen and register globals variables are enabled.

Recommendations: For versions prior to 0.2f, consider disabling the register globals variable and restricting the use of allow url fopen to minimize the risk of exploitation. Additionally, avoid using the LangCookie parameter in sensitive operations until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-0953

Produtos afetados

Php Address

Referências · 6

• 🔥 http://securityfocus.com/bid/5039 · Exploit
• 🔥 https://exploit-db.com/exploits/21564 · Exploit
• 🔥 http://iss.net/security_center/static/9379.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0953 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html · Nota
• http://online.securityfocus.com/archive/1/277987 · Nota